Abstract:Deep neural networks (DNNs) have achieved great success in various applications due to their strong expressive power. However, recent studies have shown that DNNs are vulnerable to adversarial examples, and these manipulated instances can mislead DNN into making false predictions. The existing methods of generating adversarial examples include pixel-level perturbation or spatial transformation of images, which cannot consider concurrently with the semantic quality of adversarial examples or success rate of attack. These methods are computationally bulky and slow to generate the adversarial examples. To solve this kind of issue, a two-stage generative adversarial networks (TSGAN) with semantic content constraints is proposed in this paper. The first-stage uses the original example dataset to train generator G, which can help the generator learn the distribution of real examples. Then, the example semantic quality constraint loss function, the adversarial loss function and the distance loss function are adopted in the second-stage, so that the generator G can continue to learn to search the distribution of the adversarial examples, and train the new generator G(adv). The adversarial examples generated by generator G(adv) are better fit the distribution of real examples, and have targeted black-box attack capability. The experiments show that the adversarial examples generated by TSGAN can achieve the success rate of attack at 98.40% in target model, 29.40% success rate in defense-oriented model. And 77.58% success rate is obtained in the transfer test attack. The results show that the adversarial examples generated by the proposed model, which has a highly attack success rate and more difficult to defense. Meanwhile, the improved adversarial examples have stronger transfer ability than the existing models. The proposed model can effectively reduce the expression of target category features of the adversarial examples, and the generated adversarial examples have better semantic quality than others.

Multi-target Category Adversarial Example Generating Algorithm Based on GAN

Generating Adversarial Examples with Adversarial Networks

MagicGAN: Multiagent Attacks Generate Interferential Category via GAN

Once a MAN: Towards Multi-Target Attack Via Learning Multi-Target Adversarial Network Once

Generative Transferable Adversarial Attack

MC-Net: Realistic Sample Generation for Black-Box Attacks

An Adversarial Sample Defense Method Based on Multi-Scale GAN

GAN Generate Adversarial Examples to Fool Deep Networks.

AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples

A Novel Multi-Sample Generation Method for Adversarial Attacks

CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks

Generating Adaptive Targeted Adversarial Examples for Content-Based Image Retrieval

Targeted Speech Adversarial Example Generation With Generative Adversarial Network

A novel and universal GAN-based countermeasure to recover adversarial examples to benign examples

Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection

Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks

CT-GAT: Cross-Task Generative Adversarial Attack Based on Transferability

A Two-Stage Generative Adversarial Networks with Semantic Content Constraints for Adversarial Example Generation.

GAP++: Learning to generate target-conditioned adversarial examples

Adversarial Transformation Network with Adaptive Perturbations for Generating Adversarial Examples.

Targeted Adversarial Examples Generating Method Based on cVAE in Black Box Settings